> Actually on my linux system (2.2.6) I use masquerading by the command: > > ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0 > > So, what it will the equivalent with ipchains ? ... and the equivalent with netfilter? I use: /sbin/iptables -t nat -A POSTROUTING -j SNAT --to-source $ip Where $ip is the IP address of the card connected to the internet. This confuses me, because it seems to have nothing to do with the internal network interface. Note: #/sbin/iptables -t nat -L ... Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- anywhere anywhere to:(my ip address) ... It works. How would I set it up to also perform NAT for datagrams (i.e., via the H.323 protocol)? Mike - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org